Item 26 - Agreement with Allied Network Solutions, Inc. for Adobe Software and Subscription

Home Browse Search

Security and Hosting Overview June 2015 access is limited to only select senior members of the technology team. This access list is reviewed quarterly by the internal audit team and by a third party in our annual SSAE 16 / ISAE 3402 Type 2 SOC1 and SOC2 audits. The data scrubbing process is: • A backup of the data is taken at the location where the source database resides • Data is filtered where only the most recent 3 months of data remain • Data is scrubbed as described above • Data is then securely transferred from the production system to the test system Once scrubbed, all personally identifiable information (PH) has been removed and any sensitive custom field data cannot be read. Our test systems reside in secure third party data centers with the same controls as our production data centers. 1.6.6 Data Access Direct access to production data is required in specific cases. Access is provided based on business need and not by role alone. Access reviews are conducted monthly and reviews are subject to recurring quarterly reviews by the SAP Fieldglass internal audit team. Executive review and sign off is performed for all quarterly reviews. Access is required for the following puposes: • Professional Services Data Services team — this team receives a customers master and/or worker data and executes data uploads into test and/or production environments. Once the data are successfully uploaded and customer has signed off on the accuracy and completeness of the upload, the data are destroyed. • First level help desk — when customers call our help desk, the caller may require the help desk agent to to view data or log in as the caller in order to help them with their problem. This is only performed when authorized by the caller. SAP Fieldglass has help desk locations in the following regions: United States SAP Fieldglass 111 N. Canal Street Suite 600 Chicago, IL 60606 SAP Fieldglass P a g e 17 121